npm JavaScript analyzed 0.1.192

@sideboard-ai/core

v0.1.192
npm

Sideboard core — orchestration, agents, git worktrees, MCP server

maintainer
mattlevine
licence
Apache-2.0
first seen
2026-09-01
last seen
2026-09-15
releases · 30d
84
short id

@sideboard-ai/core is an MCP server distributed on npm, maintained by mattlevine, tracked here since September 2026. It has shipped 127 releases (currently 0.1.192) and exposes 75 tools. Tools include abletime_comment, abletime_create_task, abletime_ensure_task, abletime_get_task, abletime_list_projects, abletime_list_tasks, and 69 more. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — exfiltration combo and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 75 tools appear to reach filesystem, shell / exec, network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-15: 13 tools added and 1 tool removed.

full security breakdown →
tools 20 of 75
  • abletime_comment
  • abletime_create_task
  • abletime_ensure_task
  • abletime_get_task
  • abletime_list_projects
  • abletime_list_tasks
  • abletime_orientation
  • abletime_search_tasks
  • abletime_update_task
  • add_stack_layer
  • add_workspace
  • archive_thread
  • ask_git
  • ask_user
  • create_pr_stack
  • create_schedule
  • create_thread
  • delete_schedule
  • fanout
  • fork_chat
All 75 tools →
release cadence · 90d 127 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
0.1.192 2026-09-15 npm
0.1.191 2026-09-14 npm
0.1.190 2026-09-12 npm
0.1.189 2026-09-12 npm
0.1.188 2026-09-12 npm
0.1.187 2026-09-12 npm
0.1.186 2026-09-11 npm
0.1.185 2026-09-11 npm
0.1.184 2026-09-11 npm
0.1.183 2026-09-11 npm

view all →